Two small bugfixes related to item kits.

[fa-stable.git] / inventory / manage / item_units.php

diff --git a/inventory/manage/item_units.php b/inventory/manage/item_units.php
index 61e4e685d6de346f3a37e5b3e4ab819556f8a46f..b8e432bc54f439ed20bb16d2e2d82f793da1f4e3 100644 (file)
--- a/inventory/manage/item_units.php
+++ b/inventory/manage/item_units.php
@@ -1,5 +1,4 @@
 <?php
-
 $page_security = 11;
 $path_to_root="../..";
 include($path_to_root . "/includes/session.inc");
@@ -33,7 +32,7 @@ if ($Mode=='ADD_ITEM' || $Mode=='UPDATE_ITEM')
        }
 
        if ($input_error !=1) {
-       write_item_unit($selected_id, $_POST['abbr'], $_POST['description'], $_POST['decimals'] );
+       write_item_unit(htmlentities($selected_id), $_POST['abbr'], $_POST['description'], $_POST['decimals'] );
                if($selected_id != '')
                        display_notification(_('Selected unit has been updated'));
                else
@@ -58,8 +57,8 @@ if ($Mode == 'Delete')
        {
                delete_item_unit($selected_id);
                display_notification(_('Selected unit has been deleted'));
-               $Mode = 'RESET';
        }
+       $Mode = 'RESET';
 }
 
 if ($Mode == 'RESET')
@@ -115,7 +114,6 @@ if ($selected_id != '')
        }
        hidden('selected_id', $selected_id);
 }
-
 if ($selected_id != '' && item_unit_used($selected_id)) {
     label_row(_("Unit Abbreviation:"), $_POST['abbr']);
     hidden('abbr', $_POST['abbr']);